This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft File: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft (raw, json) Hash identifier: 5I8LEieXLjsuhczQsXMVoJy1QhIBS7sAbR/LEPI+Muk= Subject key identifier: FF:85:5D:2B:36:C0:7E:A0:C1:D9:DE:69:2B:26:52:15:F3:20:B1:4B Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5 Certificate issuer: /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5 Certificate serial: 019AF5E59BDB35A850A6973641DA003F64B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft Manifest number: 16F7 Signing time: Sat 06 Dec 2025 23:00:56 +0000 Manifest this update: Sat 06 Dec 2025 23:00:56 +0000 Manifest next update: Sun 07 Dec 2025 23:00:56 +0000 Files and hashes: 1: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl (hash: R57lNDH403KRYDsYva/Kxl5kwABSuFp89SE7WJhfco8=) 2: FTO-WxW7sPayKFxLz7VzC8cq9-I.roa (hash: cBwaO5bj6Q5Qg6BTkhA0mco8iqfNRZ8ycLxM+09RwRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:9b:db:35:a8:50:a6:97:36:41:da:00:3f:64:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5 Validity Not Before: Dec 6 23:00:56 2025 GMT Not After : Dec 7 23:00:56 2025 GMT Subject: CN=ff855d2b36c07ea0c1d9de692b265215f320b14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:6e:4a:89:a8:66:52:9e:e8:26:10:e4:c5: 93:58:a0:1a:9f:7c:6b:71:4b:1c:ff:79:da:db:87: 5a:ef:8d:78:ec:a3:8d:82:db:a4:9e:86:4a:a3:b7: a4:cc:ff:4d:0e:50:b1:f1:2c:7b:3f:45:ae:f1:87: b6:49:b1:1c:6c:4f:f6:56:eb:fc:ef:17:c7:50:aa: 3d:cf:23:0f:c7:49:2a:44:36:85:f8:76:c0:54:7c: ff:22:97:a2:d4:03:0c:88:e7:86:79:9d:d1:fc:68: eb:27:36:7f:c1:ae:a7:f4:16:ea:3f:a6:94:cc:f4: 50:13:2e:90:bc:c2:2a:02:5c:55:27:54:08:01:29: a4:4c:9e:17:63:5d:90:20:4d:6e:be:40:41:a9:82: 12:40:a4:4e:1a:3a:da:d8:8b:ef:4f:7e:6d:f8:03: 03:a5:a9:95:ab:ed:a3:d8:3c:92:04:3b:d8:a4:40: 2f:dd:14:e4:c9:32:39:74:66:35:5c:f6:fe:44:c5: 17:52:16:04:b2:b9:0a:0c:29:17:90:c6:28:df:3b: d4:e1:7b:33:0e:63:01:b3:ed:91:03:00:df:0a:c5: ff:ed:fe:a5:26:27:25:d7:a5:99:13:50:8b:61:a2: 4b:b6:76:41:d9:27:b4:87:f1:47:f7:1e:3e:35:56: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:85:5D:2B:36:C0:7E:A0:C1:D9:DE:69:2B:26:52:15:F3:20:B1:4B X509v3 Authority Key Identifier: keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5e:18:a7:e0:e9:1d:68:4b:e5:50:17:5e:be:7a:95:89:1e: ab:40:b2:14:d7:a8:9a:e9:e0:aa:17:f3:36:dd:41:30:57:59: cd:ed:9f:c8:de:dc:ce:a9:29:21:68:84:6d:03:45:fe:dc:11: 16:18:60:1b:69:74:9a:d9:1e:1f:e1:b3:27:de:1f:99:b7:77: b5:89:70:2b:e0:b8:2f:f3:5f:c2:3f:cf:a4:c8:67:44:be:4e: 69:51:e5:e0:c9:0d:27:6a:91:a3:a1:71:7a:18:11:41:28:b2: f9:5a:e0:85:48:55:db:5d:c8:31:76:84:e3:57:59:14:30:2e: a0:22:f4:e6:8e:0d:43:9e:2f:75:ae:c1:31:72:8c:f0:eb:fe: 42:9c:59:dd:de:0b:a4:62:be:b2:fe:6e:e2:2d:1f:6f:19:aa: 83:cd:0a:20:dd:1e:4c:f3:57:50:b6:bc:12:47:f5:28:b3:11: 07:0d:79:39:bd:4e:e4:71:13:f7:43:c9:b9:f9:ea:b1:0f:f3: be:de:d0:1b:33:5f:8a:0c:6a:c4:97:00:73:a5:9a:2f:15:f8: 82:47:79:ea:da:68:21:3a:c7:96:e9:76:65:93:2b:30:bc:30: c2:bb:77:c5:51:9c:7b:f8:fc:13:f6:05:7a:29:a7:38:51:9b: 3d:63:54:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15ZvbNahQppc2QdoAP2S4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZDQ3OTEyZWZkNDA5YTQ2ZjdjZDQyNzQxODA0YzdkNGY1 ZTFhZDUwHhcNMjUxMjA2MjMwMDU2WhcNMjUxMjA3MjMwMDU2WjAzMTEwLwYDVQQD EyhmZjg1NWQyYjM2YzA3ZWEwYzFkOWRlNjkyYjI2NTIxNWYzMjBiMTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4duSomoZlKe6CYQ5MWTWKAan3xr cUsc/3na24da74147KONgtuknoZKo7ekzP9NDlCx8Sx7P0Wu8Ye2SbEcbE/2Vuv8 7xfHUKo9zyMPx0kqRDaF+HbAVHz/Ipei1AMMiOeGeZ3R/GjrJzZ/wa6n9BbqP6aU zPRQEy6QvMIqAlxVJ1QIASmkTJ4XY12QIE1uvkBBqYISQKROGjra2IvvT35t+AMD pamVq+2j2DySBDvYpEAv3RTkyTI5dGY1XPb+RMUXUhYEsrkKDCkXkMYo3zvU4Xsz DmMBs+2RAwDfCsX/7f6lJicl16WZE1CLYaJLtnZB2Se0h/FH9x4+NVZRtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+FXSs2wH6gwdneaSsmUhXzILFLMB8GA1UdIwQY MBaAFBHUeRLv1Amkb3zUJ0GATH1PXhrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWRSNUV1X1VDYVJ2Zk5RblFZQk1mVTllR3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi84MDI1ZjYtNWYzOC00ZGRmLTkxN2Qt MTE0YzI0MDBjM2UzLzEvRWRSNUV1X1VDYVJ2Zk5RblFZQk1mVTllR3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi84MDI1ZjYtNWYzOC00ZGRmLTkxN2QtMTE0YzI0MDBjM2Uz LzEvRWRSNUV1X1VDYVJ2Zk5RblFZQk1mVTllR3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoV4Yp+Dp HWhL5VAXXr56lYkeq0CyFNeomungqhfzNt1BMFdZze2fyN7czqkpIWiEbQNF/twR FhhgG2l0mtkeH+GzJ94fmbd3tYlwK+C4L/Nfwj/PpMhnRL5OaVHl4MkNJ2qRo6Fx ehgRQSiy+VrghUhV213IMXaE41dZFDAuoCL05o4NQ54vda7BMXKM8Ov+QpxZ3d4L pGK+sv5u4i0fbxmqg80KIN0eTPNXULa8Ekf1KLMRBw15Ob1O5HET90PJufnqsQ/z vt7QGzNfigxqxJcAc6WaLxX4gkd56tpoITrHlul2ZZMrMLwwwrt3xVGce/j8E/YF eimnOFGbPWNUQw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:35:47 2025 by rpki-client